intermediate · backend
Healthcare engineering: HIPAA and FHIR, hands-on
Building software that handles health data: FHIR resources and search on a real server, SMART on FHIR login, and HIPAA's technical safeguards as an engineering checklist.
·
By Amit Chakraborty — Kolkata, India · Remote worldwide
What you will be able to do
Stand up a FHIR server, build a client that reads a patient's clinical data, and design a system that meets HIPAA's technical safeguards.
Syllabus — 8 chapters
- 1. FHIR in an hour: resources, references and a real server — Run HAPI FHIR, create a Patient and an Observation, and read them back.
- 2. Searching FHIR: parameters, _include and paging — Answer real clinical questions with FHIR search and Bundles.
- 3. Terminologies: LOINC, SNOMED CT, RxNorm, ICD-10 — Code clinical data so other systems understand it.
- 4. SMART on FHIR: OAuth2 for health apps — Launch an app with patient context and scoped access.
- 5. HIPAA for engineers: PHI and the three rules — Know what counts as PHI and which rules touch your system.
- 6. Technical safeguards, built — Implement access control, audit logs, encryption and session limits.
- 7. Vendors, BAAs, logs and LLMs — Keep PHI out of places it must never go.
- 8. Synthetic data and de-identification — Test with realistic data that is not real patients.
0 of 8 published. A new chapter every Wednesday night. Free to read.
Learn it free, elsewhere too
The documentation, videos, books and practice sites worth your time on this subject. All free. None of it is mine.